EUVD-2026-113830

Plausible Analytics through 3.2.1 contains a mass assignment vulnerability in updatetrafficchangenotification that allows authenticated site editors to reassign notifications by supplying a siteid parameter. Attackers can submit trafficchangenotificationsiteid set to another site's primary key vi...

CVE-2026-119565 Plausible Analytics through 3.2.1 Mass Assignment via Traffic Change Notification Update

Plausible Analytics through 3.2.1 contains a mass assignment vulnerability in updatetrafficchangenotification that allows authenticated site editors to reassign notifications by supplying a siteid parameter. Attackers can submit trafficchangenotificationsiteid set to another site's primary key vi...

CVE-2025-2304

CVE-2025-2304 - Camaleon CMS 2.9.0 - Privilege Escalation Exploit Overview This Python script exploits a critical mass assignment vulnerability in Camaleon CMS version 2.9.0, allowing any registered user to escalate their privileges to administrator. Vulnerability Details CVE : CVE-2025-2304 - Ma...

Drupalgeddon2

CVE-2018-7600 | Drupal 7.58 / 8.3.9 / 8.4.6 / 8.5.1 - 'Drupalgeddon2' RCE SA-CORE-2018-002 Inspired from https://github.com/dreadlocked/Drupalgeddon2 Supports: Drupal 8.3.9 / 8.4.6 / 8.5.1 user/register URL, attacking account/mail & postrender parameter, using PHP's passthru function Pending Yet ...

CVE-2025-2304-POC

CVE-2025-2304-POC Manual poc for CVE-2025-2304: Camaleon CMS Version 2.9.0 Exploitation Steps 1. Log in as a low-privileged user e.g., "Bob". 2. Intercept the password change using a proxy e.g Burpsuite, caido and more 3. Capture the updatedajax request during a password change. 4. Inject the...

CVE-2025-2304

Camaleon CMS -p Arguments -t, --target Base target URL -u, --username Valid low-privileged username -p, --password User password Exploit Flow 1. Retrieve login page and extract CSRF token 2. Authenticate with provided credentials 3. Access profile edit page 4. Extract password update endpoint and...

CVE-2025-15602-PoC

CVE-2025-15602-PoC CVE-2025-15602-PoC is a proof of concept for the vulnerability CVE-2025-15602 in Snipe-IT. One script to list all users and one script to take over an superadmin account. Context A user as only the right to edit users, he can abuse it to list and to do an account takeover of th...

CVE-2025-2304-PoC

CVE-2025-2304 Exploit Camaleon CMS Vulnerable to Privilege Escalation through a Mass Assignment Vulnerability Description A Privilege Escalation through a Mass Assignment exists in Camaleon CMS When a user wishes to change his password, the 'updatedajax' method of the UsersController is called. T...

Exploit-for-CVE-2025-2304

Exploit-for-CVE-2025-2304 usage: exploit.py -h --url URL --username USERNAME --password PASSWORD Description Camaleon CMS is affected by a privilege escalation vulnerability due to unsafe mass assignment. The updatedajax method in UsersController uses the permit! function, allowing unfiltered...

CVE-2025-2304-CamaleonCMS-PoC

PoC: CVE-2025-2304 - Camaleon CMS Privilege Escalation Technical Overview This repository contains a Functional Proof of Concept PoC for a Mass Assignment vulnerability in Camaleon CMS versions prior to 2.8.1. The vulnerability resides in the updatedajax endpoint of the User Management module,...

CVE-2025-2304-Camaleon-CMS-Mass-Assignment-Privilege-Escalation-PoC

CVE-2025-2304 — Camaleon CMS Mass Assignment Privilege Escalation PoC Privilege escalation vulnerability in Camaleon CMS /updatedajax with passwordrole=admin injected into the password parameters. 4. Verifies the role has been updated to admin. Requirements Python 3 Install dependencies: python3 ...

PT-2026-133503

Plausible Analytics through 3.2.1 contains a mass assignment vulnerability in update traffic change notification that allows authenticated site editors to reassign notifications by supplying a site id parameter. Attackers can submit traffic change notificationsite id set to another site's primary...

CVE-2026-76012: smub: The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Remote Code…

The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.4.1 via the legacyrender function. This is due to broken authorization on the Lightroom galleryedit endpoint combined with mass...

CVE-2022-45265

CVE-2022-45265 In the Sanitization Management System 1.0 distributed by sourcecodester.com curl --location --request POST 'http://localhost/php-sms/classes/Users.php?f=save' \ --form 'id="1"' \ --form 'firstname="HACKED"' \ --form 'lastname="Administrator"' \ --form 'username="admin"' \ --form...

CVE-2025-2304-POC

CVE-2025-2304-POC PoC for CVE-2025-2304 — Camaleon CMS 2.9.0 privilege escalation via mass assignment on the password change endpoint. Vulnerability The /admin/users/:id/updatedajax endpoint does not filter the role parameter before passing it to the model update, allowing any authenticated user ...

CVE-2025-2304

Camaleon CMS 2.9.0 – Authenticated Privilege Escalation Role Change + Optional S3 Config Leak Target: Camaleon CMS v2.9.0 Type: Authenticated privilege escalation via mass-assignment in updatedajax role field Extras: Optional extraction of S3 configuration from the admin settings page if the...

CVE-2025-2304-POC

CVE-2025-2304 PoC - Camaleon CMS Privilege Escalation A Proof of Concept PoC exploit for CVE-2025-2304 , a critical mass assignment vulnerability in Camaleon CMS that allows privilege escalation from low-privileged users to administrators. ██████╗ ██████╗ ██╗ ██╗███╗ ██╗ ██████╗ ███╗ ███╗██╗...

CVE-2025-2304-POC

CVE-2025-2304 Privilege Escalation in Camaleon CMS Example python3 exploit.py http://target.com attacker attacker After successful exploitation, logout and login again to gain admin privileges. References https://nvd.nist.gov/vuln/detail/CVE-2025-2304...

CVE-2023-7028

GitLab CVE-2023-7028 POC [email protected]&[email protected] 科研机构base成都-招聘网络安全研究人员（私）...

CVE-2026-116216

MacCMS v10 through 2026.1000.4056 contains a mass assignment vulnerability in index/Comment::saveData that allows unauthenticated attackers to set arbitrary maccomment columns including userid. Attackers can submit anonymous comments with a crafted userid parameter to attribute them to any...